{"id":59674,"date":"2026-11-09T13:01:59","date_gmt":"2026-11-09T03:01:59","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/09\/how-mcp-approval-policies-secure-microsoft-ai-agent-tool-use\/"},"modified":"2026-11-09T13:05:15","modified_gmt":"2026-11-09T03:05:15","slug":"how-mcp-approval-policies-secure-microsoft-ai-agent-tool-use","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/09\/how-mcp-approval-policies-secure-microsoft-ai-agent-tool-use\/","title":{"rendered":"How MCP Approval Policies Secure Microsoft AI Agent Tool Use"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post How MCP Approval Policies Secure Microsoft AI Agent Tool Use we will explain how to stop an otherwise useful AI agent from becoming an uncontrolled business risk. The problem is rarely the agent answering a question incorrectly. The bigger concern is an agent closing a support ticket, changing a customer record, sending an email or deleting data without the right person checking the action.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Agent Framework helps organisations build AI agents that can reason, follow workflows and use business tools. Model Context Protocol, usually called MCP, is an open standard that gives those agents a consistent way to connect to systems such as service desks, databases, document platforms and internal applications.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">MCP approval policies sit between the agent\u2019s decision and the tool\u2019s execution. They determine which actions can happen automatically, which require human approval and which should never be available to the agent.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why tool access changes the AI risk conversation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An AI assistant that only drafts text has limited power. An AI agent connected to MCP tools can potentially perform work across several business systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, an IT support agent might be able to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Read an employee\u2019s support request.<\/li>\n<li>Look up a device in Microsoft Intune, which manages and secures company devices.<\/li>\n<li>Reset an account or change group membership.<\/li>\n<li>Add notes to the support system.<\/li>\n<li>Close the request and notify the employee.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Some of these actions are low risk. Others could interrupt an employee\u2019s work, expose confidential information or give someone access they should not have.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is why connecting an agent to MCP is not simply an integration decision. It is an access and governance decision. Our earlier article on why MCP tool access becomes a security decision explains this broader shift in more detail.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How MCP approval policies work<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When an agent decides to call an MCP tool, Microsoft Agent Framework can pause the run before the requested action is executed. The application presents the request to an authorised reviewer, records the decision and then either continues or rejects the action.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A useful approval request should show the reviewer exactly what is about to happen. This includes the tool name, target system, proposed arguments, business impact and identity that will perform the action.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The reviewer should not see a vague message such as \u201cApprove tool use?\u201d They should see something closer to \u201cApprove closing support ticket 18427 and emailing the requester?\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Agent Framework supports several approval approaches:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Always require approval<\/strong> for every call made through an MCP connection.<\/li>\n<li><strong>Never require approval<\/strong> for carefully selected low-risk tools.<\/li>\n<li><strong>Apply approval by tool<\/strong> so read-only actions can run automatically while actions that change data require review.<\/li>\n<li><strong>Use conditional policies<\/strong> where the decision depends on context such as the user, tool, data involved or requested action.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The goal is not to approve everything. That quickly creates delays and encourages people to approve requests without reading them. The goal is to place friction where a mistake would have a meaningful business impact.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical three-level approval model<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Level one allows low-risk read actions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tools that retrieve approved, non-sensitive information may not need human approval every time. Examples include checking a public knowledge base, reading the status of a support request or retrieving an approved product list.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These tools should still be limited to the minimum data required. \u201cRead-only\u201d does not automatically mean \u201csafe\u201d if the tool can search payroll files, customer records or executive emails.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Level two requires approval for business changes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Actions that update records, send communications or affect a workflow should usually require approval, at least during the early stages of deployment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Examples include adding a customer note, creating a purchase request, changing a ticket priority or sending an external email. Approval reduces the chance that incomplete context or a misleading instruction will trigger an unwanted outcome.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Level three blocks high-impact actions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Some actions should not be available to the agent at all. Examples include deleting production data, creating privileged administrator accounts, changing security policies or exporting large volumes of confidential information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A human approval screen is not enough for these actions. The safest control is to exclude the tool from the agent\u2019s allowed tool list or ensure the agent\u2019s identity has no permission to perform it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This layered model extends the governance approach covered in MCP tool approval policies that keep Microsoft AI agents safe. The important next step is translating the policy into enforceable Agent Framework configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring per-tool approval in Agent Framework<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For a hosted MCP connection, where Microsoft Foundry manages the tool connection and execution, a simplified Python configuration may look like this:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>from agent_framework import HostedMCPTool\n\nservice_desk = HostedMCPTool(\n name=&quot;service_desk&quot;,\n url=&quot;https:\/\/mcp.example.com&quot;,\n allowed_tools=[\n &quot;get_ticket&quot;,\n &quot;add_ticket_note&quot;,\n &quot;close_ticket&quot;\n ],\n approval_mode={\n &quot;never_require_approval&quot;: [&quot;get_ticket&quot;],\n &quot;always_require_approval&quot;: [\n &quot;add_ticket_note&quot;,\n &quot;close_ticket&quot;\n ]\n }\n)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">This configuration does two separate jobs. The <code>allowed_tools<\/code> list limits what the agent can discover and use. The approval policy then determines which of those allowed actions need a person to approve them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the application invokes MCP tools locally rather than through a hosted Foundry connection, the implementation is different. Local tools can be wrapped with Agent Framework\u2019s approval-required function controls, and the application must manage the pause, reviewer response and resumed agent run.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Whichever model you use, pin and test your Agent Framework package versions. Approval behaviour, hosted tool support and policy options continue to develop, and production controls should never depend on an untested package update.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Approval is not the same as access control<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is one of the most important points for technology leaders. An approval policy decides whether an action may proceed. It does not limit what the underlying system identity is capable of doing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If an approved agent tool runs using an account with full administrative rights, a single approval may still unlock far more access than intended. The MCP connection should use a dedicated identity with only the permissions needed for its specific task.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The approved request should also be bound to the exact tool, arguments, target system and identity context that the reviewer saw. If any of those details change while approval is pending, the original request should be cancelled and reviewed again.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a wider view of agent identities, MCP servers and business data boundaries, see our reference architecture for securing agentic AI and MCP servers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A realistic 200-person company scenario<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 200-person professional services company introducing an AI agent to reduce service desk workload. The agent can answer common questions, retrieve device details and help resolve account issues.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Requiring approval for every knowledge-base search would remove much of the productivity benefit. Allowing the agent to reset accounts, modify security groups and close tickets without review would create unacceptable risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A balanced policy could allow knowledge searches and ticket lookups automatically. Password resets could require employee verification, while group membership changes would require approval from an IT administrator. Privileged administrator changes would remain completely unavailable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The business still receives faster support and fewer repetitive requests. At the same time, the actions most likely to cause an outage, privacy incident or unauthorised access remain controlled.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What your operating model should include<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Technology alone will not create safe approval processes. Before moving an agent into production, define:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>A named owner for every tool.<\/strong> Someone must be accountable for deciding what the tool can do.<\/li>\n<li><strong>Approved reviewers.<\/strong> Sensitive requests should only go to people who understand the business impact.<\/li>\n<li><strong>Expiry and timeout rules.<\/strong> Unanswered requests should fail closed rather than execute later.<\/li>\n<li><strong>Complete audit records.<\/strong> Record the request, arguments, reviewer, decision, execution result and time.<\/li>\n<li><strong>Regular policy reviews.<\/strong> Reassess approvals whenever tools, permissions or business processes change.<\/li>\n<li><strong>Emergency shutdown controls.<\/strong> Security teams need a quick way to disable a risky MCP server or individual tool.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">These controls can also support Essential Eight activities. Essential Eight is the Australian government\u2019s cybersecurity framework that many organisations use to reduce common attack risks. MCP approvals do not create Essential Eight compliance on their own, but least privilege, controlled administration, logging and application restrictions all contribute to a stronger security position.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Purview, which helps classify and protect business information, can add data controls and audit context around agent activity. Microsoft Defender and Wiz can help security teams identify risky identities, cloud permissions and unusual behaviour. We explore the data protection layer further in our guide to securing AI agents with Microsoft Purview and Agent Framework.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Start with control before increasing autonomy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AI agents can reduce repetitive work and speed up business processes, but useful automation does not require unlimited autonomy. Start with a small allowed tool list, require approval for changes and remove human review only when monitoring shows that the action is predictable and low risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc combines more than 20 years of enterprise IT experience with practical work across Microsoft Azure, Microsoft 365, Intune, Defender, OpenAI, Claude and Wiz. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, we focus on controls that work in real organisations rather than policies that only look good on paper.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure whether your AI agents have the right tool permissions and approval boundaries, we are happy to review the design with you and identify the highest-risk gaps \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>MCP approval policies stop AI agents from taking sensitive actions unchecked. Learn how to apply practical approval controls in Microsoft Agent Framework without creating unnecessary delays.<\/p>\n","protected":false},"author":1,"featured_media":59676,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[121,13,68,113],"tags":[],"class_list":["post-59674","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-governance-risk-management","category-blog","category-mcp-server","category-microsoft-agent-framework"],"jetpack-related-posts":[{"id":59638,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/08\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe\/","url_meta":{"origin":59674,"position":0},"title":"MCP Tool Approval Policies That Keep Microsoft AI Agents Safe","author":"CPI Staff","date":"November 8, 2026","format":false,"excerpt":"MCP tool approvals stop AI agents from taking sensitive actions without oversight. Here is a practical governance model for balancing productivity, security and accountability.","rel":"","context":"In &quot;AI Governance &amp; Risk Management&quot;","block_context":{"text":"AI Governance &amp; Risk Management","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-governance-risk-management\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/11\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/11\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe.png 1x, \/wp-content\/uploads\/2026\/11\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe.png 1.5x, \/wp-content\/uploads\/2026\/11\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe.png 2x, \/wp-content\/uploads\/2026\/11\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe.png 3x, \/wp-content\/uploads\/2026\/11\/mcp-tool-approval-policies-that-keep-microsoft-ai-agents-safe.png 4x"},"classes":[]},{"id":59444,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/27\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments\/","url_meta":{"origin":59674,"position":1},"title":"Securing Agentic AI and MCP Servers in Microsoft Environments","author":"CPI Staff","date":"October 27, 2026","format":false,"excerpt":"A practical reference architecture for controlling AI agent identities, MCP tools, business data and automated actions across Microsoft environments.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments.png 1x, \/wp-content\/uploads\/2026\/10\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments.png 1.5x, \/wp-content\/uploads\/2026\/10\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments.png 2x, \/wp-content\/uploads\/2026\/10\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments.png 3x, \/wp-content\/uploads\/2026\/10\/securing-agentic-ai-and-mcp-servers-in-microsoft-environments.png 4x"},"classes":[]},{"id":58659,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance\/","url_meta":{"origin":59674,"position":2},"title":"Microsoft Agent Framework Production Guide for A2A MCP Governance","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"The latest Microsoft Agent Framework releases improve long-running work, A2A reliability, MCP support and runtime controls. Here is what technology leaders should review before production.","rel":"","context":"In &quot;AI Governance &amp; Risk Management&quot;","block_context":{"text":"AI Governance &amp; Risk Management","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-governance-risk-management\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance.png 1x, \/wp-content\/uploads\/2026\/08\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance.png 1.5x, \/wp-content\/uploads\/2026\/08\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance.png 2x, \/wp-content\/uploads\/2026\/08\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance.png 3x, \/wp-content\/uploads\/2026\/08\/microsoft-agent-framework-production-guide-for-a2a-mcp-governance.png 4x"},"classes":[]},{"id":57883,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/using-a2a-and-mcp-together-for-safer-business-ai-systems\/","url_meta":{"origin":59674,"position":3},"title":"Using A2A and MCP Together for Safer Business AI Systems","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"A practical guide for CIOs and tech leaders on combining A2A and MCP to build AI systems that are useful, secure, and easier to govern.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/using-a2a-and-mcp-together-for-safer-business-ai-systems.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/using-a2a-and-mcp-together-for-safer-business-ai-systems.png 1x, \/wp-content\/uploads\/2026\/07\/using-a2a-and-mcp-together-for-safer-business-ai-systems.png 1.5x, \/wp-content\/uploads\/2026\/07\/using-a2a-and-mcp-together-for-safer-business-ai-systems.png 2x, \/wp-content\/uploads\/2026\/07\/using-a2a-and-mcp-together-for-safer-business-ai-systems.png 3x, \/wp-content\/uploads\/2026\/07\/using-a2a-and-mcp-together-for-safer-business-ai-systems.png 4x"},"classes":[]},{"id":59558,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/05\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security\/","url_meta":{"origin":59674,"position":4},"title":"What the AKS MCP Gateway Means for Production AI Agent Security","author":"CPI Staff","date":"November 5, 2026","format":false,"excerpt":"Microsoft\u2019s MCP gateway for AKS creates one governed entry point for AI tools. Here is what it improves, what it does not, and how to assess production readiness.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/11\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/11\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security.png 1x, \/wp-content\/uploads\/2026\/11\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security.png 1.5x, \/wp-content\/uploads\/2026\/11\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security.png 2x, \/wp-content\/uploads\/2026\/11\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security.png 3x, \/wp-content\/uploads\/2026\/11\/what-the-aks-mcp-gateway-means-for-production-ai-agent-security.png 4x"},"classes":[]},{"id":58415,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track\/","url_meta":{"origin":59674,"position":5},"title":"MCP A2A and Semantic Memory Capabilities Every CIO Should Track","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"MCP, A2A and semantic memory could make AI agents more useful and portable. Here is what CIOs should monitor before moving from pilot to production.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track.png 1x, \/wp-content\/uploads\/2026\/08\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track.png 1.5x, \/wp-content\/uploads\/2026\/08\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track.png 2x, \/wp-content\/uploads\/2026\/08\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track.png 3x, \/wp-content\/uploads\/2026\/08\/mcp-a2a-and-semantic-memory-capabilities-every-cio-should-track.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/11\/how-mcp-approval-policies-secure-microsoft-ai-agent-tool-use.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59674","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59674"}],"version-history":[{"count":2,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59674\/revisions"}],"predecessor-version":[{"id":59677,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59674\/revisions\/59677"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59676"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59674"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59674"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59674"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}